December 2001 - Zope-Dev

ZopeVersionControl proposal.
by Lennart Regebro 04 Dec '01

04 Dec '01

I finally got the time to read through the ZopeVersionControl proposal properly. It seems all very good too me. It does feel a bit like Zope as usual is completely technology driven and haven't invested much thought in how it should be used and how the management interface should look, but thats what I expected. :-) I also feel that there are some things that seem both hard to do and not very useful, such as sharing version across sites (unless you mean different directories in one installation that has siteroots). At the same time things like "diffs" between versions which I rather find like a very essential feature is put down as "optional". Other than these minor issues I can't wait for Zope with version control. In fact, I needed it months ago. :-)

1 0

my comments on i18n
by Juan David Ibáñez Palomar 04 Dec '01

04 Dec '01

Hi all, I've readed the relevants messages right now, hope didn't missed any. Instead of trying to answer everybody I'd like to make two concrete proposals. As Paul said in the Paris meeting and as Joachim W. has stated in a previous mail, one thing we can work on is in a common way to get translations from message catalogs, from Python code and DTML and ZPT templates. Don't matters where the messages and their translations are stored, either in a "ZBabel Tower" or in a "Message Catalog" or somewhere else, they would be get in the same way. So, Stephane, Joachim and every body else, we can work on this if want. I would propose to do it in a wiki and step by step: first Python code, when have finished with it we move to DTML, and finally to ZPT. The output from this would be an specification for the way to get translations from message catalogs in the ZODB. My second concrete proposal is about content negotiation, which includes language negotiation. There's already a proposal for this in the fishbowl: http://dev.zope.org/Wikis/DevSite/Proposals/HTTPContentNegotiation This proposal was made by Andreas Jung and Tino Wildenhain, let's move it forward. IMO this should be the first thing to put in the core. -- J. David Ibáñez, Nuxeo.com Debian user (http://www.debian.org)

2 2

Open letters, hijacking and the like
by Danny William Adair 04 Dec '01

04 Dec '01

Hi! Wow, this is the first time I have more zope-dev mails in my inbox than from the "main" list (and I'm very happy that all this stays on one list). What I have seen from ZC up til now seems like they disclose practically everything but their client base, ok and maybe plans for a commercial Zope product (I count two now that have been dropped, this does not include Zope itself). Efforts have been made to separate the "geeks" from the "tie-fighters" (.org/.com), but I can't see any negative side-effects for the development of Zope itself. Maybe "not yet", but, and this goes out to Mr O'Brien: It needs two to tango. Fair enough. ZC knows that, and especially Paul Everitt has pointed out more than once the dedication that ZC has towards "the community". I want to thank Zope Corporation for everything that's been done up til now. This is the kind of track I will stay on. I see this working. Whatever parts of Zope don't work as expected, I don't know in how far I could ever put blame about that on ZC. These guys are more open to new ideas, efforts from the community and mutual benefits than anyone else I have met (in my short life, ok granted). Akm's worries and complaints are legitimate (and he has already corrected his language), and I see people reacting _immediately_. What more can you expect? In my opinion it was just a contretemps that priorities in the User API were set differently than expected from someone who dedicates a hell of a lot of time to that field of development. My personal opinion is that ZC should give akm a CVS account and let him put some elaborate changes to the user api for 2.5, apparently he knows exactly what he's doing. "Dude": Do it better and _then_ complain. ZC's not yo mama, feeding you software with a spoon. It looks like you're spilling it all, anyway. Take a look at the ZPL, take a look at the Public CVS, the Wikis, the fishbowls, the open-sourced literature, and then think again. "Closure of code / internals" is not an arguable point when it comes to Zope, that's just being paranoid. You are welcome to take from the community, you are welcome to contribute to the community, you are welcome to make money with Zope. It's all there. Closure of code is not what will separate the wheat from the chaff, business-wise. Couldn't-resisting-ly yours, Danny

7 10

PythonScript
by Dirk Datzert 04 Dec '01

04 Dec '01

Hi, I have following trivial problem: A DTML-Mthode calls a PythonScript suchThemen with Argumen themen like this <dtml-in "suchThemen(themen)"> <dtml-var themas> </dtml-in> The PythonScript should return values and I want to display in the dtml-in-loop the result variable themas. Question: How must I programm the PythonScript that suchThemen returns variables of name themas ? Thanks Dirk

3 2

Re: fishing for dinosaurs...
by Chris Withers 04 Dec '01

04 Dec '01

Stephan Richter wrote: > > Time in my case at least. Over the last 6 month I have been gradually > working on SourceForge-like site. Why bother? Why not just use SourceForge? > - ZBabel (I have written some code that let's you update translations via a > Master Tower remotely. I would love it, if you could translate squishdot > with it...) How would I go abotu doing that? cheers, Chris

2 2

Re: [Zope-dev] Fully Zope-based Mailman Version
by Fred Wilson Horch 04 Dec '01

04 Dec '01

This is great! Finally somebody is working on integrating Mailman with Zope! Count me in -- we had a volunteer struggle with the Mailman code over the summer before giving up. Fred P.S. By the way, last week I added CGI 1.1 support to Zope 2.3.3. This allows us to run the existing Mailman code (version 2.0.7) as a CGI script without having to run another web server besides Zope / ZServer. If anyone is interested in this code, please let me know. Right now it is an external method that requires the PathHandler product. The basic idea is to parse the URL using PathHandler, which calls our external method. Our external method sets up the required environment variables (has to correct a few glitches introduced by Zope in the environment dictionary), forks and execs the CGI script with the cleaned up environment dictionary, parses the output the CGI script returns, cleans up its forked children, and returns the CGI script output to the browser. This is all working fine with Mailman 2.0.7, Python 1.5.2 and Zope 2.3.3. I've tested a few other CGI scripts. YMMV. Maybe Zope already supported CGI scripts, but I sure couldn't figure out how to make them work! -- Fred Wilson Horch mailto:fhorch@ecoaccess.org Executive Director, EcoAccess http://ecoaccess.org/ P.O. Box 2823, Durham, NC 27715-2823 phone: 919.419-8567

3 3

External Script python and CMF
by Pascal Samuzeau 04 Dec '01

04 Dec '01

Hello, I've installed a CMF site. I receive, by e-mail, some files in XML format, on another server than my Zope server. I need to create, update document, in the folder's Member who send me thoses files. Beacuse, I don't know how it's working, I've choose XML-RPC to have dialog between the two servers. Has someone an fully example, to do the same thing or near ? Sincerily PS -------------------------------------------------- Oreka ! Nous sommes l'internet moins cher ! Surfez 25% moins cher avec http://www.oreka.com

1 0

RE: [Zope-Annce] jcNTUserFolder 0.2.1 released
by Jay, Dylan 04 Dec '01

04 Dec '01

> -----Original Message----- > From: Jephte CLAIN [mailto:Jephte.Clain@univ-reunion.fr] > Sent: Tuesday, 4 December 2001 5:51 PM > To: Jay, Dylan > Cc: zope-dev(a)zope.org > Subject: Re: [Zope-Annce] jcNTUserFolder 0.2.1 released > > > "Jay, Dylan" wrote: > > One way is to not replicate the challenge-response > functionatlity at all. > this is the solution i have opted for. it has run now for two > years :-) > the problem is Zope cannot be in remote user mode and in > normal mode at > the same time. I think that setting up a zeo cluster (one > zope instance > that is served through IIS, and is used to update content, > and one which > has the normal behavior, and serves public content) could enable this, > but I haven't tried yet. There has to be some way round that. Is the REMOTE_USER variable still pased in even if zope isn't in remote user mode? Couldn't a user folder be implemented to use it? > > Put Zope behind IIS in two spots. One which is protected > and thus elicits a > > challenge/response and another that has IIS anoymous access > on it. Then get > > the zope security machinery to alternate between the two > urls depending on > > the security required. > please elaborate: you mean that when access to > http://iis.host.com/zope_anonymous.pcgi/protected_resource is > forbidden, > zope automatically redirect the user to > http://iis.host.com/zope_protected.pcgi/protected_resource? Yes, that's exactly what I mean. > > Then all you need is remote user mode in Zope to work > > by allowing any remote user secure access. Perhaps remembering new > > REMOTE_USER's so further roles can be associated with them. > I don't understand :-( I guess what I'm talking about is a user folder implementation that uses the REMOTE_USER variable and contructs a user object around that. It assumes that IIS has done it's job and the this REMOTE_USER is allowed in. It looks to see if it's seen this user before. If not it creates the user with some default role. If the user does exist with the same name as REMOTE_USER then this user is used with all it's associated roles etc. I had thought this is what jcNTUserFolder did but I couldn't get it to work like this. I think what it does do is try to authenticate directly with the nt domain server using a name and password supplied by the user?

2 1

RE: [Zope-Annce] jcNTUserFolder 0.2.1 released
by Jay, Dylan 04 Dec '01

04 Dec '01

One way is to not replicate the challenge-response functionatlity at all. Put Zope behind IIS in two spots. One which is protected and thus elicits a challenge/response and another that has IIS anoymous access on it. Then get the zope security machinery to alternate between the two urls depending on the security required. Then all you need is remote user mode in Zope to work by allowing any remote user secure access. Perhaps remembering new REMOTE_USER's so further roles can be associated with them. I've tried doing this in the past but I think my install of IIS was screwed and I couldn't use either jcNTUserFolder or GUF to allow any REMOTE_USER in, so I gave up. Would my idea work, or is it flawed? > -----Original Message----- > From: Jephte CLAIN [mailto:Jephte.Clain@univ-reunion.fr] > Sent: Tuesday, 4 December 2001 3:40 PM > To: Jay, Dylan > Cc: zope-dev(a)zope.org > Subject: Re: [Zope-Annce] jcNTUserFolder 0.2.1 released > > > "Jay, Dylan" wrote: > > Can I ask you a question? Something I;ve tried to do in the > past with > > jcNTUserFolder (maybe not tried hard enough) is this. I > want all my users to > > be authenticated via challenge-response mechanism such that > no one has to > > enter a username or password. > > >From what I can work out jcNTUserFolder doesn't actually > help with this at > > all, or have I missed something? > I wrote jcNTUserFolder just to do that, you know :-) > But, currently, you have to go through IIS. I think there is > an howto on > http://www.zope.org/Members/jephte > > I have tried to look at challenge/response authentication, > but it is so > hard and so much undocumented I left it. it would require to change > Medusa (IIS and IE have a no-close connection when in > challenge/response > mode. it seems it must be so at least for the > challenge/response part of > the protocol; I suppose it would require too much time if they have to > authenticate on each connection :), and to change Zope (you don't have > the password, just a hash, that you must ask the PDC to validate for > you, unless someone know how the hash is generated), and to have a > compatible User Folder. > > however, if someone can point me to a good source of > documentation about > that, and some example code, I may want to give it a try again. > > regards, > jephte.clain(a)univ-reunion.fr >

2 1

Re: [Zope-Annce] jcNTUserFolder 0.2.1 released
by Jephte CLAIN 04 Dec '01

04 Dec '01

"Jay, Dylan" wrote: > Can I ask you a question? Something I;ve tried to do in the past with > jcNTUserFolder (maybe not tried hard enough) is this. I want all my users to > be authenticated via challenge-response mechanism such that no one has to > enter a username or password. > >From what I can work out jcNTUserFolder doesn't actually help with this at > all, or have I missed something? I wrote jcNTUserFolder just to do that, you know :-) But, currently, you have to go through IIS. I think there is an howto on http://www.zope.org/Members/jephte I have tried to look at challenge/response authentication, but it is so hard and so much undocumented I left it. it would require to change Medusa (IIS and IE have a no-close connection when in challenge/response mode. it seems it must be so at least for the challenge/response part of the protocol; I suppose it would require too much time if they have to authenticate on each connection :), and to change Zope (you don't have the password, just a hash, that you must ask the PDC to validate for you, unless someone know how the hash is generated), and to have a compatible User Folder. however, if someone can point me to a good source of documentation about that, and some example code, I may want to give it a try again. regards, jephte.clain(a)univ-reunion.fr

1 0